{
    "properties": {
        "PayloadDescription": {
            "default": "Configures restrictions",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "Restrictions",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.applicationaccess",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.applicationaccess",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        },
        "allowAccountModification": {
            "description": "Allow user to modify accounts",
            "type": "boolean"
        },
        "allowActivityContinuation": {
            "default": true,
            "description": "If set to false, Handoff will be disabled.",
            "type": "boolean"
        },
        "allowAddingGameCenterFriends": {
            "default": true,
            "description": "Allow the user to add Friends on Game Center",
            "type": "boolean"
        },
        "allowAirDrop": {
            "description": "Disable AirDrop if set to false",
            "type": "boolean"
        },
        "allowAppCellularDataModification": {
            "default": true,
            "description": "Allow modifying cellular data usage for apps settings",
            "type": "boolean"
        },
        "allowAppInstallation": {
            "default": true,
            "description": "Allow only a connected Mac host to install applications",
            "type": "boolean"
        },
        "allowAppRemoval": {
            "default": true,
            "description": "Allow the user to remove apps (Supervised only)",
            "type": "boolean"
        },
        "allowAssistant": {
            "default": true,
            "description": "Allow Siri",
            "type": "boolean"
        },
        "allowAssistantUserGeneratedContent": {
            "default": true,
            "description": "When false, prevents Siri from querying user-generated content from the web.",
            "type": "boolean"
        },
        "allowAssistantWhileLocked": {
            "default": true,
            "description": "Allow Siri while device is locked",
            "type": "boolean"
        },
        "allowAutoCorrection": {
            "default": true,
            "description": "Allow Auto Correction (Supervised devices only)",
            "type": "boolean"
        },
        "allowAutoUnlock": {
            "default": true,
            "description": "If set to false, disallows macOS auto unlock. Defaults to true.",
            "type": "boolean"
        },
        "allowAutomaticAppDownloads": {
            "default": true,
            "description": "If set to false, prevents automatic downloading of apps purchased on other devices. Does not affect updates to existing apps. Defaults to true",
            "type": "boolean"
        },
        "allowBluetoothModification": {
            "default": true,
            "description": "Allow modifying Bluetooth settings",
            "type": "boolean"
        },
        "allowBookstore": {
            "default": true,
            "description": "Supervised only. If set to false, iBookstore will be disabled.",
            "type": "boolean"
        },
        "allowBookstoreErotica": {
            "default": true,
            "description": "Supervised only. If set to false, the user will not be able to download media from the iBookstore that is tagged as erotica.",
            "type": "boolean"
        },
        "allowCamera": {
            "default": true,
            "description": "Allow the user to use the camera",
            "type": "boolean"
        },
        "allowChat": {
            "default": true,
            "description": "Allow use of iMessage (Supervised only)",
            "type": "boolean"
        },
        "allowCloudAddressBook": {
            "default": true,
            "description": "Allow macOS iCloud Address Book Services",
            "type": "boolean"
        },
        "allowCloudBTMM": {
            "default": true,
            "description": "Allow iCloud Back to my Mac",
            "type": "boolean"
        },
        "allowCloudBackup": {
            "default": true,
            "description": "Allow backup using iCloud",
            "type": "boolean"
        },
        "allowCloudBookmarks": {
            "default": true,
            "description": "Allow macOS iCloud Bookmark Sync",
            "type": "boolean"
        },
        "allowCloudCalendar": {
            "default": true,
            "description": "Allow macOS iCloud Calendar Services",
            "type": "boolean"
        },
        "allowCloudDesktopAndDocuments": {
            "default": true,
            "description": "If set to false, disallows macOS cloud desktop and document services. Defaults to true.",
            "type": "boolean"
        },
        "allowCloudDocumentSync": {
            "default": true,
            "description": "Allow document syncing with iCloud. When false, disables document and key-value syncing to iCloud.",
            "type": "boolean"
        },
        "allowCloudFMM": {
            "default": true,
            "description": "Allow iCloud Find my Mac",
            "type": "boolean"
        },
        "allowCloudKeychainSync": {
            "default": true,
            "description": "Allow iCloud Keychain Sync",
            "type": "boolean"
        },
        "allowCloudMail": {
            "default": true,
            "description": "Allow macOS iCloud Mail Services",
            "type": "boolean"
        },
        "allowCloudNotes": {
            "default": true,
            "description": "Allow macOS iCloud Notes Services",
            "type": "boolean"
        },
        "allowCloudPhotoLibrary": {
            "default": true,
            "description": "Allow iCloud Photo Library to be used on the device",
            "type": "boolean"
        },
        "allowCloudReminders": {
            "default": true,
            "description": "Allow macOS iCloud Reminder Services",
            "type": "boolean"
        },
        "allowDefinitionLookup": {
            "default": true,
            "description": "Allow Define (Supervised devices only)",
            "type": "boolean"
        },
        "allowDeviceNameModification": {
            "default": true,
            "description": "Allow modifying device name",
            "type": "boolean"
        },
        "allowDiagnosticSubmission": {
            "description": "Send diagnostic and usage reports to Apple",
            "type": "boolean"
        },
        "allowDiagnosticSubmissionModification": {
            "default": true,
            "description": "If set to false, the diagnostic submission and app analytics settings in the Diagnostics & Usage pane in Settings cannot be modified",
            "type": "boolean"
        },
        "allowEnablingRestrictions": {
            "default": true,
            "description": "Allow configuring restrictions (Supervised only)",
            "type": "boolean"
        },
        "allowEnterpriseAppTrust": {
            "default": true,
            "description": "If set to false removes the Trust Enterprise Developer button in Settings->General->Profiles Device Management, preventing apps from being provisioned by universal provisioning profiles. This restriction applies to free developer accounts but it does not apply to enterprise app developers who are trusted because their apps were pushed via MDM, nor does it revoke previously granted trust. Defaults to true.",
            "type": "boolean"
        },
        "allowEnterpriseBookBackup": {
            "default": true,
            "description": "Allow enterprise books to be backed up",
            "type": "boolean"
        },
        "allowEnterpriseBookMetadataSync": {
            "default": true,
            "description": "Allow enterprise books notes and highlights to be synced",
            "type": "boolean"
        },
        "allowEraseContentAndSettings": {
            "default": true,
            "description": "Supervised only. If set to false, the user cannot choose the option \"Erase All Content and Settings\" in Settings > General > Reset",
            "type": "boolean"
        },
        "allowExplicitContent": {
            "default": true,
            "description": "Allow user access of explicit content",
            "type": "boolean"
        },
        "allowFindMyFriendsModification": {
            "default": true,
            "description": "If set to false, changes to Find My Friends are disabled.",
            "type": "boolean"
        },
        "allowFingerprintForUnlock": {
            "default": true,
            "description": "Allow Touch ID to Unlock Device",
            "type": "boolean"
        },
        "allowFingerprintModification": {
            "default": true,
            "description": "Allow modifying Touch ID fingerprints",
            "type": "boolean"
        },
        "allowGameCenter": {
            "default": true,
            "description": "Allow Game Center (Supervised only)",
            "type": "boolean"
        },
        "allowGlobalBackgroundFetchWhenRoaming": {
            "default": true,
            "description": "Allow automatic sync while roaming",
            "type": "boolean"
        },
        "allowHostPairing": {
            "default": true,
            "description": "If set to false, host pairing is disabled with the exception of the supervision host. If no supervision host certificate has been configured, all pairing is disabled. Host pairing lets the administrator control which devices an iOS 7 device can pair with.",
            "type": "boolean"
        },
        "allowInAppPurchases": {
            "default": true,
            "description": "Allow the user to make purchases within applications",
            "type": "boolean"
        },
        "allowKeyboardShortcuts": {
            "default": true,
            "description": "Allow Keyboard Shortcuts (Supervised devices only)",
            "type": "boolean"
        },
        "allowLockScreenControlCenter": {
            "default": true,
            "description": "If false, prevents Control Center from appearing on the Lock screen.",
            "type": "boolean"
        },
        "allowLockScreenNotificationsView": {
            "default": true,
            "description": "If set to false, the Notifications view in Notification Center on the lock screen is disabled and users can\u2019t receive notifications when the screen is locked.",
            "type": "boolean"
        },
        "allowLockScreenTodayView": {
            "default": true,
            "description": "If set to false, the Today view in Notification Center on the lock screen is disabled.",
            "type": "boolean"
        },
        "allowManagedAppsCloudSync": {
            "default": true,
            "description": "Allow iCloud sync for managed apps",
            "type": "boolean"
        },
        "allowMultiplayerGaming": {
            "default": true,
            "description": "Allow multiplayer gaming",
            "type": "boolean"
        },
        "allowMusicService": {
            "default": true,
            "description": "If set to false, Apple Music will be disabled in the Music app.",
            "type": "boolean"
        },
        "allowNews": {
            "default": true,
            "description": "Allow the user to access and use News",
            "type": "boolean"
        },
        "allowNotificationsModification": {
            "default": true,
            "description": "Allow Modifying Notifications Settings",
            "type": "boolean"
        },
        "allowOTAPKIUpdates": {
            "default": true,
            "description": "If false, over-the-air PKI updates are disabled. Setting this restriction to false does not disable CRL and OCSP checks. Default is true.",
            "type": "boolean"
        },
        "allowOpenFromManagedToUnmanaged": {
            "default": true,
            "description": "Enable allow open from managed to unmanaged",
            "type": "boolean"
        },
        "allowOpenFromUnmanagedToManaged": {
            "default": true,
            "description": "Enable allow open from unmanaged to managed",
            "type": "boolean"
        },
        "allowPairedWatch": {
            "default": true,
            "description": "If set to false, disables pairing with an Apple Watch. Any currently paired Apple Watch is unpaired and erased. Defaults to true.",
            "type": "boolean"
        },
        "allowPassbookWhileLocked": {
            "default": true,
            "description": "If set to false, Wallet notifications will not be shown on the lock screen.",
            "type": "boolean"
        },
        "allowPasscodeModification": {
            "default": true,
            "description": "If set to false, prevents the device passcode from being added, changed, or removed. Defaults to true. This restriction is ignored by shared iPads.",
            "type": "boolean"
        },
        "allowPhotoStream": {
            "default": true,
            "description": "Allow Photo Stream to be used on the device",
            "type": "boolean"
        },
        "allowPodcasts": {
            "default": true,
            "description": "If set to false, disables podcasts. Defaults to true.",
            "type": "boolean"
        },
        "allowPredictiveKeyboard": {
            "default": true,
            "description": "Allow Predictive Keyboard (Supervised devices only)",
            "type": "boolean"
        },
        "allowRadioService": {
            "default": true,
            "description": "If set to false, Apple Music Radio is disabled.",
            "type": "boolean"
        },
        "allowRemoteScreenObservation": {
            "default": true,
            "description": "Allow Classroom or similar to observe the screen. This key should be nested beneath allowScreenShot as a sub-restriction. If allowScreenShot is set to false, it also prevents the Classroom app from observing remote screens.",
            "type": "boolean"
        },
        "allowSafari": {
            "default": true,
            "description": "Allow the user to use Safari",
            "type": "boolean"
        },
        "allowScreenShot": {
            "default": true,
            "description": "Allow the user to take screenshots or screen recordings",
            "type": "boolean"
        },
        "allowSharedStream": {
            "default": true,
            "description": "If set to false, disabled Shared Stream.",
            "type": "boolean"
        },
        "allowSpellCheck": {
            "default": true,
            "description": "Allow Spell Check (Supervised devices only)",
            "type": "boolean"
        },
        "allowSpotlightInternetResults": {
            "default": true,
            "description": "If set to false, search results from the web will not be shown in Spotlight.",
            "type": "boolean"
        },
        "allowUIAppInstallation": {
            "default": true,
            "description": "When false, the App Store is disabled and its icon is removed from the Home screen. However, users may continue to use Host apps (iTunes, Configurator) to install or update their apps.",
            "type": "boolean"
        },
        "allowUIConfigurationProfileInstallation": {
            "default": true,
            "description": "Supervised only. If set to false, the user is prohibited from installing configuration profiles and certificates interactively.",
            "type": "boolean"
        },
        "allowUntrustedTLSPrompt": {
            "default": true,
            "description": "Allow user to accept untrusted TLS certificates",
            "type": "boolean"
        },
        "allowVideoConferencing": {
            "default": true,
            "description": "Allow video conferencing",
            "type": "boolean"
        },
        "allowVoiceDialing": {
            "default": true,
            "description": "Allow voice dialing while device is locked",
            "type": "boolean"
        },
        "allowWallpaperModification": {
            "default": true,
            "description": "Allow modifying Wallpaper (Supervised only)",
            "type": "boolean"
        },
        "allowYouTube": {
            "default": true,
            "description": "When false, the YouTube application is disabled and its icon is removed from the Home screen.",
            "type": "boolean"
        },
        "allowiTunes": {
            "default": true,
            "description": "When false, the iTunes Music Store is disabled and its icon is removed from the Home screen. Users cannot preview, purchase, or download content.",
            "type": "boolean"
        },
        "autonomousSingleAppModePermittedAppIDs": {
            "description": "If present, allows apps identified by the bundle IDs listed in the array to autonomously enter Single App Mode.",
            "items": {
                "description": "App Bundle ID specified will be allowed to enter Single App Mode autonomously.",
                "type": "string"
            },
            "type": "array"
        },
        "blacklistedAppBundleIDs": {
            "description": "If present, prevents bundle IDs listed in the array from being shown or launchable.",
            "items": {
                "default": "",
                "description": "Blacklisted App",
                "type": "string"
            },
            "type": "array"
        },
        "forceAirDropUnmanaged": {
            "default": false,
            "description": "Treat AirDrop as Unmanaged Destination",
            "type": "boolean"
        },
        "forceAirPlayIncomingRequestsPairingPassword": {
            "default": false,
            "description": "If set to true, forces all devices sending AirPlay requests to this device to use a pairing password.",
            "type": "boolean"
        },
        "forceAirPlayOutgoingRequestsPairingPassword": {
            "default": false,
            "description": "If set to true, forces all devices receiving AirPlay requests from this device to use a pairing password.",
            "type": "boolean"
        },
        "forceAssistantProfanityFilter": {
            "default": false,
            "description": "Enable Siri Profanity Filter (Supervised devices only)",
            "type": "boolean"
        },
        "forceEncryptedBackup": {
            "default": false,
            "description": "Force encrypted backups",
            "type": "boolean"
        },
        "forceITunesStorePasswordEntry": {
            "default": false,
            "description": "Require the user's iTunes password to be entered for every purchase",
            "type": "boolean"
        },
        "forceLimitAdTracking": {
            "default": false,
            "description": "If true, limits ad tracking. Default is false.",
            "type": "boolean"
        },
        "forceWatchWristDetection": {
            "default": false,
            "description": "Force Apple Watch wrist detection",
            "type": "boolean"
        },
        "ratingApps": {
            "default": 1000,
            "description": "Ranking number for apps",
            "type": "number"
        },
        "ratingMovies": {
            "default": 1000,
            "description": "Ranking number for movies",
            "type": "number"
        },
        "ratingRegion": {
            "description": "Two-character code for the region used to specify ratings",
            "enum": [
                "us",
                "au",
                "ca",
                "de",
                "fr",
                "ie",
                "jp",
                "nz",
                "gb"
            ],
            "type": "string"
        },
        "ratingTVShows": {
            "default": 1000,
            "description": "Ranking number for TV Shows",
            "type": "number"
        },
        "safariAcceptCookies": {
            "default": 2,
            "description": "Accept cookies: 0 - Never, 1 - From current website only (iOS 8) or visited sites (pre-iOS 8), 1.5 - From websites I visit, 2 - Always",
            "enum": [
                0,
                1,
                1.5,
                2
            ],
            "type": "number"
        },
        "safariAllowAutoFill": {
            "default": true,
            "description": "Allow AutoFill in Safari",
            "type": "boolean"
        },
        "safariAllowJavaScript": {
            "default": true,
            "description": "Allow JavaScript in Safari",
            "type": "boolean"
        },
        "safariAllowPopups": {
            "default": true,
            "description": "Allow Pop-ups in Safari",
            "type": "boolean"
        },
        "safariForceFraudWarning": {
            "default": false,
            "description": "Enable fraud warning in Safari",
            "type": "boolean"
        },
        "whitelistedAppBundleIDs": {
            "description": "If present, allows only bundle IDs listed in the array from being shown or launchable.",
            "items": {
                "default": "",
                "description": "Whitelisted App",
                "type": "string"
            },
            "type": "array"
        }
    },
    "title": "com.apple.applicationaccess",
    "type": "object"
}